Описание
IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
A flaw was found in Wireshark. A memory leak in the IEEE C37.118 Synchrophasor protocol dissector can allow an attacker to cause a Denial of Service (DoS). By convincing a user to open a maliciously crafted packet capture file, the dissector fails to release allocated memory during packet dissection. This continuous memory consumption can lead to resource exhaustion, ultimately causing the application to crash or become unresponsive.
Меры по смягчению последствий
Operational mitigation can be achieved by avoiding the inspection of untrusted packet captures or capturing traffic on untrusted networks. Additionally, the affected protocol parser can be disabled in the Wireshark user interface:
- Open Wireshark and navigate to Analyze -> Enabled Protocols...
- Search for "IEEE C37.118" or "Synchrophasor".
- Uncheck the entry to disable the dissector, then click Save or OK. Caveats: Disabling this protocol parser prevents Wireshark from decoding IEEE C37.118 Synchrophasor traffic; corresponding packets will be shown only as raw transport layer data (such as TCP or UDP). Restarting Wireshark or reloading the active capture file may be required for the configuration change to take effect.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | wireshark | Fix deferred | ||
| Red Hat Enterprise Linux 6 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 7 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 8 | wireshark | Not affected | ||
| Red Hat Enterprise Linux 9 | wireshark | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to ...
IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Уязвимость функции wmem_file_scope() компонента SYNCHROPHASOR dissector (packet-synphasor.c) анализатора трафика компьютерных сетей Wireshark, позволяющая нарушителю вызывать отказ в обслуживании
EPSS
5.5 Medium
CVSS3